CVE-2006-5878

2006-11-1419:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-5878

cross-site request forgery

csrf vulnerability

edgewall trac

nvd

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

89.9%

JSON

Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

CPENameOperatorVersion
edgewall_software:tracedgewall software traceq0.8.4
edgewall_software:tracedgewall software traceq0.7.1
edgewall_software:tracedgewall software traceq0.6.1
edgewall_software:tracedgewall software traceq0.8
edgewall_software:tracedgewall software traceq0.5
edgewall_software:tracedgewall software traceq0.6
edgewall_software:tracedgewall software traceq0.8.2
edgewall_software:tracedgewall software traceq0.9.1
edgewall_software:tracedgewall software traceq0.9b1
edgewall_software:tracedgewall software traceq0.5.2

CPE	Name	Operator	Version
edgewall_software:trac	edgewall software trac	eq	0.8.4
edgewall_software:trac	edgewall software trac	eq	0.7.1
edgewall_software:trac	edgewall software trac	eq	0.6.1
edgewall_software:trac	edgewall software trac	eq	0.8
edgewall_software:trac	edgewall software trac	eq	0.5
edgewall_software:trac	edgewall software trac	eq	0.6
edgewall_software:trac	edgewall software trac	eq	0.8.2
edgewall_software:trac	edgewall software trac	eq	0.9.1
edgewall_software:trac	edgewall software trac	eq	0.9b1
edgewall_software:trac	edgewall software trac	eq	0.5.2